Principal Software Engineer - Veza

What you'll do

• Own identity architecture for workloads and agents, including trust, credential lifecycle, and runtime authorization.
• Define identity standards and contracts across integrations and collaborate with graph, data model, and deployment architects.
• Lead the Agent Security identity roadmap and represent the architecture to customers, partners, leadership, and standards bodies.

What they ask for

• 12+ years in security or identity engineering, with substantial experience designing production identity systems at scale.
• Deep expertise in workload identity (SPIFFE/SPIRE or equivalent), ephemeral credentials, OAuth 2.x, OIDC, token exchange, and authorization models.
• Experience building security products meeting security and compliance requirements, and delivering production AI or agentic systems.
• Strong Python or Go skills and executive-level communication.

Nice to have

• Experience with acquisitions or platform integrations, integration-heavy platforms, graph databases, or immutable/event-sourced storage.
• Authored or shaped identity standards or RFCs, or built/operated a production credential broker or identity provider.

Pay

$199,100 - $348,400 USD base pay

Tools

SPIFFE/SPIRE, RFC 8693, OAuth 2.x, OIDC, RBAC, ABAC, ReBAC, OPA

AI focus

Design identity and runtime authorization for AI agents; experience delivering production AI or agentic systems, including evaluation, guardrails, and human-in-the-loop controls, is required. Active use of AI-native development tools is also required.